|
Hello, How might I write a display filter for a tcp port range? I'm wanting to filter two sets of ranges. TCP/8600-8619 and TCP/8400-8402 thanks, J |
|
Please try this:
HINT: That will only show traffic in one direction, which is from client --> server. However, that should be enough the figure out the tcp stream number, and then filter on that in a second step, possibly with tshark.
Then use that output and filter on tcp.stream Regards Thanks for the extra Tshark component, very nice. J
(10 Jul '13, 07:57)
JTech_17
|
|
With newer versions of libpcap (0.9.1 and later): You can break it down further if you care about source or destination ports. As an example: More information can be found on the manpages That's a capture filter, not a display filter; it's useful, but it doesn't solve this particular problem.
(26 Nov '15, 13:44)
Guy Harris ♦♦
|
